$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: x2l7n727meKq2rQuIXTJZ0epWQRRiu/59mpFBmSQ3xc= Subject key identifier: 18:C4:C7:FD:F9:63:E0:11:68:F2:5C:DF:57:E5:4A:D5:CF:8F:44:B5 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 0193 Signing time: Thu 07 Aug 2025 04:18:36 +0000 Manifest this update: Thu 07 Aug 2025 04:18:36 +0000 Manifest next update: Thu 14 Aug 2025 04:18:36 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: Mr9Sl1RpNfXxqH0Q1Ko00Pq1k0AKMm6mNnd6yQecMTY=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: uvZ2Q94gPhmYQwiI4YLVYozC9g+L2KL5OS58nY+uLv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Aug 7 04:18:36 2025 GMT Not After : Aug 14 04:18:36 2025 GMT Subject: CN=6894291c-5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:51:f7:4e:29:51:6e:b8:81:c7:22:7f:e7: c3:81:60:b1:93:ce:be:6e:b4:4a:05:ea:a4:d5:93: f8:02:11:9e:63:64:f9:af:a1:17:16:56:80:0d:c3: 53:17:8c:3e:45:d1:84:0e:0b:a8:d2:9e:52:d4:9e: 30:45:f9:cf:eb:35:89:6e:f4:0f:ad:63:af:5e:10: 4d:66:b3:d9:25:32:c5:d4:e3:4e:89:8a:a6:81:40: 46:52:03:6c:33:72:45:cd:3b:d5:c1:e4:19:db:69: 45:6e:e7:6c:4f:01:d4:0f:65:81:7f:eb:30:87:4a: 37:52:5b:c1:87:28:9e:0d:f3:a7:0c:ad:62:5e:cc: 95:79:ad:5d:f3:1b:30:36:b3:d9:d3:c1:33:17:8a: 4b:3b:d0:8d:dd:42:16:cd:a8:b6:fa:86:17:e7:72: cf:e4:3a:c9:41:b2:b9:22:01:75:64:3e:0d:73:e9: e5:0b:eb:de:81:34:d6:86:6b:d9:21:b7:e5:26:4b: 4e:24:30:3c:e9:9d:5c:f7:0b:3b:27:e2:00:2e:11: be:8a:b7:31:20:b7:51:f9:49:50:14:ac:60:40:67: f8:26:30:05:28:62:7b:7f:c5:3c:47:9d:1b:5f:6a: a4:f5:19:4c:69:68:71:5c:5f:37:04:5f:9c:4d:8d: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C4:C7:FD:F9:63:E0:11:68:F2:5C:DF:57:E5:4A:D5:CF:8F:44:B5 X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:76:7c:80:17:6d:b2:8e:b1:cf:19:33:2e:1c:7c:d6:67:c5: d0:7d:b3:55:fd:3a:80:af:52:87:eb:3f:30:c7:67:01:f0:c7: 46:a2:82:0e:0d:31:6c:bb:1b:76:23:3f:99:74:80:bf:5d:4f: 05:b9:f5:db:a2:ca:79:ec:0a:8f:69:70:8b:68:5a:2f:d0:39: d5:85:42:1b:90:2d:b7:96:79:72:9d:13:a0:85:bc:79:dd:df: 5f:3c:86:8a:7f:fb:32:bd:79:a1:1b:a7:ce:22:d7:39:64:62: d8:21:86:16:36:e4:92:94:f4:c5:b1:f4:e4:ea:e6:1c:9d:23: e9:2a:d1:51:0e:78:0e:8e:87:43:9d:6e:88:0a:b4:27:10:af: f7:c0:e0:b8:7b:06:f4:87:83:79:39:f7:c2:ef:2b:cf:20:53: 36:cd:87:8b:b0:92:91:64:51:56:75:24:aa:cb:fa:04:81:6b: 97:ef:27:f1:3b:46:40:df:76:88:17:e2:72:aa:33:10:29:08: 41:46:cb:ed:65:c3:6e:ae:64:02:75:e0:41:35:75:e9:e5:7b: 1b:73:16:bb:6f:57:79:b9:40:9e:67:c2:0b:7a:c3:9b:43:de: cd:fb:35:12:d2:bc:68:18:8f:23:74:f1:1d:d8:20:c1:b1:2f: 3c:60:44:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwODA3MDQxODM2WhcNMjUwODE0MDQxODM2WjAYMRYwFAYD VQQDEw02ODk0MjkxYy01ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lVR904pUW64gccif+fDgWCxk86+brRKBeqk1ZP4AhGeY2T5r6EXFlaADcNT F4w+RdGEDguo0p5S1J4wRfnP6zWJbvQPrWOvXhBNZrPZJTLF1ONOiYqmgUBGUgNs M3JFzTvVweQZ22lFbudsTwHUD2WBf+swh0o3UlvBhyieDfOnDK1iXsyVea1d8xsw NrPZ08EzF4pLO9CN3UIWzai2+oYX53LP5DrJQbK5IgF1ZD4Nc+nlC+vegTTWhmvZ IbflJktOJDA86Z1c9ws7J+IALhG+ircxILdR+UlQFKxgQGf4JjAFKGJ7f8U8R50b X2qk9RlMaWhxXF83BF+cTY1YAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjEx/35 Y+ARaPJc31flStXPj0S1MB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6dnyAF22yjrHPGTMuHHzWZ8XQfbNV/TqAr1KH6z8wx2cB8MdGooIO DTFsuxt2Iz+ZdIC/XU8FufXbosp57AqPaXCLaFov0DnVhUIbkC23lnlynROghbx5 3d9fPIaKf/syvXmhG6fOItc5ZGLYIYYWNuSSlPTFsfTk6uYcnSPpKtFRDngOjodD nW6ICrQnEK/3wOC4ewb0h4N5OffC7yvPIFM2zYeLsJKRZFFWdSSqy/oEgWuX7yfx O0ZA33aIF+JyqjMQKQhBRsvtZcNurmQCdeBBNXXp5Xsbcxa7b1d5uUCeZ8ILesOb Q97N+zUS0rxoGI8jdPEd2CDBsS88YETC -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:43 2025 by rpki-client